Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34ca87d7-ed62-4445-a114-bd33a654a75d.roa
File: 34ca87d7-ed62-4445-a114-bd33a654a75d.roa (raw, json)
Hash identifier: +0Hl8wdbTZSdx4g+NvAXAU7yg9bvbInarxeyRw3UWn4=
Subject key identifier: AD:45:55:D2:09:8A:C4:85:28:8B:85:02:16:44:D4:34:27:6C:7E:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 426C111A9D0A57EAE58363FA48A7AFE6D982470E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34ca87d7-ed62-4445-a114-bd33a654a75d.roa
Signing time: Tue 08 Apr 2025 00:30:27 +0000
ROA not before: Tue 08 Apr 2025 00:30:27 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6c:11:1a:9d:0a:57:ea:e5:83:63:fa:48:a7:af:e6:d9:82:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:30:27 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=ae7c1f0ee6618b9db2a36da5bbedfac6c86173b4e975a8b37881560fc49312b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:9a:3b:ff:a1:38:f0:ec:78:53:6e:98:2c:
6d:97:a7:0e:57:bc:f8:68:c2:cd:66:bc:6c:a0:89:
9a:34:d1:64:df:23:9a:63:62:8e:20:da:09:45:bf:
79:2e:03:2e:b8:cb:17:4e:0b:a0:ea:10:ff:95:2e:
a0:9c:6b:69:9a:6a:8d:cc:a9:07:bb:be:a1:ff:a8:
18:ab:3b:d0:05:22:11:b3:fc:11:df:3f:18:41:96:
cd:18:8a:0f:54:d4:a2:8f:c2:c2:a0:7b:0f:42:f9:
98:a2:44:5a:f9:82:ea:b6:b5:3d:82:89:f4:4b:a2:
d7:8d:f2:f5:53:dc:0d:f8:2b:22:97:bc:12:59:1d:
fb:aa:9d:62:9f:8a:e1:96:09:67:48:9e:9d:0e:55:
e0:9c:28:bb:a5:71:de:1f:b8:66:53:2f:e2:fd:fb:
79:fb:db:a5:4c:15:5a:9b:c1:a7:71:86:1d:78:2c:
a0:bb:9e:84:44:62:41:38:c3:e6:a5:2c:da:2d:20:
12:0a:2c:ef:c3:f8:0d:8f:ee:a0:39:de:af:c2:a8:
07:50:d6:cf:79:46:6d:88:c6:04:ed:37:36:44:59:
83:d5:35:0a:9a:56:08:e2:99:e6:cb:d3:10:06:69:
24:59:f5:36:71:f3:0a:fd:b7:c1:9b:23:93:1f:b2:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:55:D2:09:8A:C4:85:28:8B:85:02:16:44:D4:34:27:6C:7E:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34ca87d7-ed62-4445-a114-bd33a654a75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:da:59:bd:18:db:a5:e6:ee:bf:a7:ad:34:e7:5d:25:b2:1e:
9d:43:70:ab:92:57:4e:4a:98:65:23:df:d4:16:e1:61:21:49:
ad:f1:4d:16:86:d8:a1:69:c9:79:87:1f:b3:36:99:9f:50:79:
21:43:cc:8e:76:28:60:4d:fe:f1:1e:3f:1c:a1:e3:e7:44:41:
24:15:01:6d:09:37:89:3b:9b:0c:63:d5:c2:20:73:66:19:87:
8a:d0:d1:fe:c0:23:07:a5:6a:e6:89:80:af:b5:1a:ab:de:7c:
15:b6:94:78:9a:ad:b4:9f:6b:f0:92:3f:bd:4a:ea:f4:9d:38:
f5:b2:68:54:01:38:df:5c:0c:f1:32:80:1f:95:b2:0f:7a:c7:
13:f6:1f:50:28:39:de:d9:bc:62:6f:f5:dd:b7:29:09:25:23:
64:f0:14:54:23:41:9f:03:46:4e:37:36:6b:ac:e7:7f:60:75:
97:b4:0d:13:93:89:b2:a5:1a:1d:3c:fc:50:77:e1:e4:06:71:
ce:03:4a:a0:2f:ec:4d:82:0d:f9:7d:a0:69:2f:73:6b:48:b8:
61:2f:40:04:84:60:f1:ce:8b:fb:d3:11:e2:0c:ed:5a:ce:94:
a4:25:da:f0:cc:13:22:38:bf:d1:5f:ee:5b:13:c1:30:0a:58:
85:fd:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:02 2025 by rpki-client on console.sobornost.net